Privacy Policy

The data controller is the Greek société anonyme “ΚΩΝ ΔΗΜ ΤΟΥ ΑΝΤ ΤΟΥΝΤΑΣ ΞΕΝΟΔΟΧΕΙΑΚΕΣ ΚΑΙ ΤΟΥΡΙΣΤΙΚΕΣ ΕΠΙΧΕΙΡΗΣΕΙΣ ΑΝΩΝΥΜΟΣ ΕΤΑΙΡΕΙΑ”, VAT number EL094163138, Batsi 84503, Andros, Greece, which runs the hotel Chryssi Akti, Sure Hotel Collection; phone +30 22820 41236, email info@hotel-chryssiakti.gr. For any matter concerning your personal data, contact us at this email address or phone number. This policy covers the website hotel-chryssiakti.gr only.

Through the contact form we only collect what you enter yourself:

• Full name
• Email address
• Subject
• Your message

Together with the message we receive the language of the page you wrote from, so that we can answer in your language.

The booking forms of the website keep no data: they only hand the dates, the number of rooms and the number of guests to the BookOnlineNow booking engine, which opens in a new tab. You enter the details of your booking there, and we process them for your booking as described below. The website itself takes no payments, and we do not build visitor profiles.

If you accept statistics cookies in the consent window, Google Analytics records details of your visit with a random identifier stored in a cookie: which pages you read, which country and approximate city you are in, what device and browser you use, where you came from, and whether you sent a message, tapped our phone number or email address, or opened the booking engine. It does not show us who you are and does not store your IP address. We also use Google Search Console, which shows us in aggregate which searches the website appears for and places no cookies on your device.

We process the details of the contact form to answer your message. The legal basis is our legitimate interest in answering whoever writes to us (Article 6(1)(f) of the General Data Protection Regulation, EU 2016/679) and, when your message concerns a stay, taking steps at your request before entering into a contract (Article 6(1)(b)).

We process the details of a booking to carry out your stay (Article 6(1)(b)) and to meet the obligations that the law places on accommodation providers (Article 6(1)(c)).

We process the Google Analytics statistics only with your consent, under Article 6(1)(a) of the GDPR and Article 4(5) of Greek Law 3471/2006, to understand how the website is used and to improve it. You can withdraw your consent at any time from the Cookie settings link at the bottom of every page. Withdrawal does not affect anything that happened before it.

To display the website, your browser loads the styling and the icons from public content delivery networks (cdn.tailwindcss.com, unpkg.com). These providers receive only the technical details every connection needs, such as your IP address, and set no cookies. The legal basis is our legitimate interest in running the website (Article 6(1)(f)).

We do not send marketing or newsletter emails. If we ever want to, we will first ask for your explicit consent, separately.

Messages from the contact form reach us as emails at info@hotel-chryssiakti.gr and are read only by the hotel staff. Your data is not sold, rented or passed to third parties for commercial purposes. The only recipients apart from us are:

• The website hosting provider, which sends the form emails and runs the hotel mailbox, as processor, with servers inside the European Union
• The provider of the BookOnlineNow booking engine, through which you book
• Google Ireland Limited, for Google Analytics, as processor, only if you give your consent
• The competent authorities, where the law requires it

The Google Analytics statistics may also be processed on servers outside the European Union, including in the United States. This transfer relies on Google LLC's certification under the EU-U.S. Data Privacy Framework and on the European Commission's standard contractual clauses.

We keep messages from the contact form for twelve months and then delete them, unless they lead to a booking. We keep the details of a booking for as long as the hotel's tax and tourism obligations require. You can ask for earlier deletion, unless there is a legal obligation to keep the data. Google Analytics statistics are kept for 14 months and then deleted automatically. Your answer in the consent window stays in your browser for 12 months.

You have the right of access to your data, and the rights to rectification, erasure, restriction of processing, data portability and objection. To exercise any of them, email info@hotel-chryssiakti.gr or call +30 22820 41236. We reply within one month at the latest. If you believe the processing of your data breaks the law, you have the right to lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr) or with the data protection authority of the country where you live.

The website runs only over an encrypted connection (https) and hosts no user accounts or visitor passwords. We do not use advertising cookies. Statistics cookies (Google Analytics) are only set if you accept them. The fonts load from our own server, and the map on the Contact page is an image from OpenStreetMap on our own server. The Get Directions button and the links to Facebook, Instagram and Tripadvisor open those services only if you press them, and from there their own terms apply. The BookOnlineNow booking engine runs at its own address, with its own terms. Everything about cookies is in the Cookie Policy.

If anything material changes in the way we process your data, we will update this page and its date. You will also find our details on the Contact page.